---
id: CVE-2020-9327
title: >-
  In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL
  pointer dereference and segmentation fault because of generated column
  optimizations.
summary: >-
  In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL
  pointer dereference and segmentation fault because of generated column
  optimizations.
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-476
vendor: sqlite
product: sqlite
affected:
  - sqlite = 3.31.1
  - cloud_backup
  - ubuntu_linux = 16.04
  - ubuntu_linux = 18.04
  - ubuntu_linux = 19.10
  - sinec_infrastructure_network_services < 1.0.1.1
  - 'communications_network_charging_and_control >= 12.0.0, <= 12.0.3'
  - communications_network_charging_and_control = 6.0.1
  - communications_network_charging_and_control = 12.0.2
  - enterprise_manager_ops_center = 12.4.0.0
  - hyperion_infrastructure_technology = 11.1.2.4
  - mysql_workbench <= 8.0.22
  - outside_in_technology = 8.5.4
  - outside_in_technology = 8.5.5
  - zfs_storage_appliance_kit = 8.8
  - communications_messaging_server = 8.1
patched:
  - sinec_infrastructure_network_services 1.0.1.1
published: '2020-02-21'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T09:17:21.740'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-9327'
references:
  - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf'
    label: cve@mitre.org
  - url: 'https://security.gentoo.org/glsa/202003-16'
    label: cve@mitre.org
  - url: 'https://security.netapp.com/advisory/ntap-20200313-0002/'
    label: cve@mitre.org
  - url: 'https://usn.ubuntu.com/4298-1/'
    label: cve@mitre.org
  - url: 'https://www.oracle.com/security-alerts/cpuApr2021.html'
    label: cve@mitre.org
  - url: 'https://www.oracle.com/security-alerts/cpujan2021.html'
    label: cve@mitre.org
  - url: 'https://www.oracle.com/security-alerts/cpujul2020.html'
    label: cve@mitre.org
  - url: 'https://www.oracle.com/security-alerts/cpuoct2020.html'
    label: cve@mitre.org
  - url: 'https://www.sqlite.org/cgi/src/info/4374860b29383380'
    label: cve@mitre.org
  - url: 'https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e'
    label: cve@mitre.org
  - url: 'https://www.sqlite.org/cgi/src/info/abc473fb8fb99900'
    label: cve@mitre.org
  - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.gentoo.org/glsa/202003-16'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20200313-0002/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://usn.ubuntu.com/4298-1/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.oracle.com/security-alerts/cpuApr2021.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.oracle.com/security-alerts/cpujan2021.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.oracle.com/security-alerts/cpujul2020.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.oracle.com/security-alerts/cpuoct2020.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.sqlite.org/cgi/src/info/4374860b29383380'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.sqlite.org/cgi/src/info/abc473fb8fb99900'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-389290.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.03683
epssPercentile: 0.89442
ingestedAt: '2026-10-14T09:24:26.052Z'
---

## Overview

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

## Affected

- `sqlite = 3.31.1`
- `cloud_backup`
- `ubuntu_linux = 16.04`
- `ubuntu_linux = 18.04`
- `ubuntu_linux = 19.10`
- `sinec_infrastructure_network_services < 1.0.1.1`
- `communications_network_charging_and_control >= 12.0.0, <= 12.0.3`
- `communications_network_charging_and_control = 6.0.1`
- `communications_network_charging_and_control = 12.0.2`
- `enterprise_manager_ops_center = 12.4.0.0`
- `hyperion_infrastructure_technology = 11.1.2.4`
- `mysql_workbench <= 8.0.22`
- `outside_in_technology = 8.5.4`
- `outside_in_technology = 8.5.5`
- `zfs_storage_appliance_kit = 8.8`
- `communications_messaging_server = 8.1`

## Remediation

Upgrade past the affected range:

- `sinec_infrastructure_network_services 1.0.1.1`